FakeNinja Unpacker Plugin v1.00
by BoB
Created 28.08.2007


Description

This is a plugin to statically unpack FakeNinja v2.8 ..


Usage:
Simply open the target file in PEiD and select the plugin from the menu, unpacking is automatic..

The unpacked file is saved into the same directory as the original plugin ..
The name is the same, except .Unpacked is added before .EXE ..

EG: Test.EXE becomes Test.Unpacked.EXE



Signatures

[FakeNinja v2.8 (Anti-Debug) -> Spirit]
signature = 64 A1 18 00 00 00 EB 02 C3 11 8B 40 30 EB 01 0F 0F B6 40 02 83 F8 01 74 FE EB 01 E8 90 C0 FF FF EB 03 BD F4 B5 64 A1 30 00 00 00 0F B6 40 02 74 01 BA 74 E0 50 00 64 A1 30 00 00 00 83 C0 68 8B 00 EB 00 83 F8 70 74 CF EB 02 EB FE 90 90 90 0F 31 33 C9 03 C8 0F 31 2B C1 3D FF 0F 00 00 73 EA E8 08 00 00 00 C1 3D FF 0F 00 00 74 AA EB 07 E8 8B 40 30 EB 08 EA 64 A1 18 00 00 00 EB F2 90 90 90 BA ?? ?? ?? ?? FF E2 64 11 40 00 FF 35 84 11 40 00 E8 40 11 00 00 6A 00 6A 00 FF 35 70 11 40 00 FF 35 84 11 40 00 E8 25 11 00 00 FF
ep_only = false

[FakeNinja v2.8 -> Spirit]
signature = BA ?? ?? ?? ?? FF E2 64 11 40 00 FF 35 84 11 40 00 E8 40
ep_only = false


History

Version 1.00 - 28-Aug-2007
     o   Unpacks any file protected with CDS SS v1.00 Beta 1 ..


Info

Greets to: sowhat-x, snaker, Jibz & Qwerton, Jupiter, BuLLeT, _pusher_, dila, mr Haggar, Fly, CyberDoom and all peeps on PEiD forum

Comments? Bugs?    You look like Jessica Alba? ;)    Email : BobSoft@GMail.com

For more plugins see my plugins site - Hosted by BuLLeT (Thanks!)

Thanks again to whoever invented coffee, without which I would never get anything done.. ;)

~ A program without bugs has either too few users, or too few uses ~